Azure Compute roles and permissions

Role Permission Description
Azure Resource Manager Storage Account Reader

Can read all Azure Resource Manager Storage Account Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermstorageaccount.read Can read all Azure storage account Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
 Azure Resource Manager Storage Account Writer

Can read and execute all Azure Resource Manager Storage Account Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermstorageaccount.read Can read all Azure storage account Command Blocks and jobs
command.cmdazurermstorageaccount.write Can write all Azure storage account Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
command.schedules.write Can write all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
 Azure Resource Manager Virtual Machines Reader

Can read all Azure Resource Manager Virtual Machines Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermvirtualmachine.read Can read all Azure virtual machine Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Azure Resource Manager Virtual Machines Writer

Can read and execute all Azure Resource Manager Virtual Machines Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermvirtualmachine.read Can read all Azure virtual machine Command Blocks and jobs
command.cmdazurermvirtualmachine.write Can write all Azure virtual machine Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
command.schedules.write Can write all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)

Related articles

Updated: Jan 20, 2025